Go/k8s.io/kubernetes CVE-2019-11251: unknown, EPSS 2.62%
Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.13.11 or later.
go get k8s.io/kubernetes@v1.13.11go get k8s.io/kubernetes@v1.14.7go get k8s.io/kubernetes@v1.16.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.13.10 | 1.13.11 | - |
| 1.14.6 | 1.14.7 | - |
| 1.15.3 | 1.16.0 | - |
Fixed versions
| 1.13.11 | 1.14.7 | 1.16.0 |
Sources
- osv: GO-2022-0802
- https://github.com/advisories/GHSA-6qfg-8799-r575
- https://github.com/kubernetes/kubernetes/issues/87773
- https://github.com/kubernetes/kubernetes/pull/82143
- https://groups.google.com/d/msg/kubernetes-announce/YYtEFdFimZ4/nZnOezZuBgAJ
CVE-2019-11251 · published · modified · JSON